Dear Vyatta users,
I'm new to this rapidly growing community and just started using Vyatta for our new network. So far, everything works perfect and we are very pleased with Vyatta!
We just run in to a very strange problem. I've been banging my head against the wall for a day or two now..
I've setup the interfaces as followed:
Codes: S - State, L - Link, u - Up, D - Down, A - Admin Down
Interface IP Address S/L Description
--------- ---------- --- -----------
eth0 171.xx.xxx.254/30 u/u NETWORK
eth0.15 171.xx.xxx.126/25 u/u VLAN15_INET
171.xx.xxx.1/32
eth1 217.xxx.xxx.188/29 u/u WAN
BGP router identifier 172.xxx.xxx.243, local AS number 57xxx
RIB entries 727781, using 44 MiB of memory
Peers 3, using 7572 bytes of memory
Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd
217.xxx.xx.185 4 24785 711879 5030 0 0 0 07:25:37 393937
217.xxx.xx.186 4 24785 720221 5028 0 0 0 07:25:41 393937
217.xxx.xx.187 4 20562 3341262 5043 0 0 0 07:25:42 115705
So far, so good. I got connection and could login. Then i started defining zones to the interfaces:
zone DMZ {
default-action drop
description "Web-facing servers"
from WAN {
firewall {
name DMZ_TO_WAN
}
}
interface eth0.15
}
zone LOCAL {
from WAN {
firewall {
name WAN_TO_lOCAL
}
}
local-zone
}
zone WAN {
from DMZ {
firewall {
name WAN_TO_DMZ
}
}
interface eth1
}
--------
I've added some drop/accept rules and also this went like crazy - worked fine. until we noticed some serious performance issues in the network!
If i logon to a server (or vyatta) and do a wget /100mb.bin file (Dutch, Local, International) it won't go any faster then 157kb/s while we have a 100Mbit feed.
Is there a default value for bandwidth limiting or something that i'm not thinking about? Qos? Something else?
-------
edit
I've even try'd this:
vyatta@cr2# show traffic-policy
limiter NO_LIMIT {
default {
bandwidth 100mbit
}
}
Just to be sure.

There is no default setting in vyatta that limits bandwidth or performs any type of Qos.
=-=-=-=
Perhaps there is a speed/duplex mismatch between vyatta and another device? Run...
show interfaces ethernet detail
...and see if there are many errors/dropped/overruns listed for one or more of your ethernet interfaces. You may need to manually configure the speed or duplex for one of your interfaces.
=-=-=-=
If you remove the firewall commands does your transfer speed improve? How is your vyatta CPU load during a transfer? Running...
show system uptime
... will show you some load parameters. (or you can run "top")
Thank you for your reply. We found it to be a broken cable that effected the speed.
Thank you for your reply. We found it to be a broken cable that effected the speed.